Coverstar

"Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device's camera, contacts, microphone, and other features. If you wish to change our access or permissions, you may do so in your device's settings."

The app requests access to contacts, camera, microphone, and unspecified 'other features' from the user's device. Access to contacts in particular goes beyond what a music/cover-song app would need for core functionality.

"We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address)."

The app collects both precise and imprecise location data using GPS and other technologies. For a music/cover-song app, precise GPS location tracking appears excessive relative to core functionality.

"Business Partners: We may share your information to offer certain products, services, or promotions. With Service Providers: Trusted third-party service providers (hosting, analytics, payment processing), bound by strict data protection obligations."

Data is shared with both service providers and unspecified 'business partners' for promotions and offers, which is a broad category that could encompass a wide range of third-party data sharing.

"We may use cookies and other tracking technologies (e.g., web beacons, pixel tags) to collect information about how our website and services are accessed and used, helping us improve user experience, analyze trends, administer the website, and enhance the functionality and security of our services."

The app uses cookies, web beacons, and pixel tags to track user activity across their services, collecting usage data, device information, and geolocation data through these tracking technologies.

"We may update this notice occasionally. The updated version will have an updated "Revised" date and be effective when accessible. We may post a notice or notify you directly if changes are material."

The company can update the privacy policy at any time, with changes taking effect simply by being posted. Notification of material changes is discretionary ('we may'), not guaranteed.

"No purpose requires retaining personal information more than one (1) month past account termination, unless law permits. When no ongoing business need exists, we delete or anonymize personal data. If this is not immediately possible, we securely store it and isolate it from further processing until deletion is feasible."

While a one-month post-termination period is stated, the 'unless law permits' carve-out and vague 'business necessity' criteria for retention (service continuity, troubleshooting, improvements, legal defense) create open-ended exceptions that could justify indefinite retention.

"You have the right to request access to the personal information we collect, change it, or delete it. To make such requests, please email us at: dpo@coverstar.app. Request account termination, and we will deactivate or delete info in active databases, retaining some data if necessary for fraud prevention, troubleshooting, or compliance."

Account and data deletion requires emailing the DPO rather than offering a self-service option. Additionally, some data may be retained even after a deletion request under broad justifications like 'troubleshooting' or 'fraud prevention'.